EUVD-2025-10120

Malicious code in bioql PyPI...

Microsoft Office Code Execution Vulnerability (CNVD-2025-10613)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

CVE-2025-30386

CVE-2025-30386 is a Microsoft Office use-after-free remote-code-execution vulnerability. Public sources (MSRC/MSCVEs) describe it affecting Office components (Excel/PowerPoint/Outlook/SharePoint/Docs) with local exploitation; patching is provided via Office/MSR security updates (e.g., KB5002711) ...

CVE-2025-27746

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-26642

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-24080

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Patch Tuesday - June 2024

It’s June 2024 Patch Tuesday. Microsoft is addressing 51 vulnerabilities today, and has evidence of public disclosure for just a single one of those. At time of writing, none of the vulnerabilities published today are listed on CISA KEV, although this is always subject to change. Microsoft is...

CVE-2017-11854

Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka...